Disabling network access #536

fiquick · 2024-11-19T18:11:26Z

No description provided.

fiquick · 2024-11-20T15:15:51Z

document Aura Console / Security / Network Access

fiquick · 2024-11-22T11:37:24Z

modules/ROOT/pages/platform/security/secure-connections.adoc


-The Aura Console runs in a separate VPC, separate from the rest of Aura.
+An Aura instance can be publicly available, completely private, or configured to allow both public and private access.
+To configure network access, you need to be authorized to access the part of [your system's?] infrastructure that runs and handles these instances as well as the networking used to establish secure connections between the database and the application's VPC. This includes the ability to connect over the cloud provider's private link and private endpoint.


@AlexicaWright do you think the original writer meant authorized access to the "customer insfrastructure", "Aura infrastructure" or both?

User=customer, we speak directly to the user. I think what is meant is that in order to configure access, you need access to either the console, or whatever equivalent the user has in their setup.

fiquick · 2024-11-22T11:42:23Z

modules/ROOT/pages/platform/security/secure-connections.adoc

+. Create a VPC endpoint
+. Accept endpoint connection requests and enable private DNS in the cloud provider's console
+. Disable public traffic (optional). 
+If you disable public traffic it is highly recommended to link:https://support.neo4j.com/s/article/13174783967507-How-To-Test-Connectivity-Through-The-Private-Endpoint[Test Connectivity Through The Private Endpoint]


I was wondering, if I should put the steps in here? They are available in a KB and it's a major pain point that customer's are not checking their connectivity.

There should not be a link to a Support article. If the information there is needed, better to lift it from there and put it here somewhere.

fiquick · 2024-11-22T11:42:38Z

modules/ROOT/pages/platform/security/secure-connections.adoc

+
+.Network access visual
+[.shadow]
+image::network_access.png[]


The shield icon is a bit wonky in UPX designs.

fiquick · 2024-11-22T11:43:01Z

modules/ROOT/pages/platform/security/secure-connections.adoc

@@ -65,7 +93,7 @@ Aura VPCs can't initiate connections back to your VPCs.
 ==== Browser and Bloom access over private endpoints

 To connect to your instance via Browser or Bloom, you must use a dedicated VPN.
-This is because when you disable public access to your instance, this applies to all connections, including those from your computer when using Browser or Bloom.
+This is because when you xref:[disable public access] to your instance, this applies to all connections, including those from your computer when using Browser or Bloom.


Do you think I should link to the disabling public access section here, and in the xrefs below?

Yes, why not? I think it would be helpful.

You'll need to insert the xref here.

AlexicaWright

I don't know about the image though.

AlexicaWright · 2024-11-22T12:58:00Z

modules/ROOT/pages/platform/security/secure-connections.adoc


-The Aura Console runs in a separate VPC, separate from the rest of Aura.
+An Aura instance can be publicly available, completely private, or configured to allow both public and private access.
+To configure network access, you need to be authorized to access the part of [your system's?] infrastructure that runs and handles these instances as well as the networking used to establish secure connections between the database and the application's VPC. This includes the ability to connect over the cloud provider's private link and private endpoint.


User=customer, we speak directly to the user. I think what is meant is that in order to configure access, you need access to either the console, or whatever equivalent the user has in their setup.

AlexicaWright · 2024-11-22T12:59:04Z

modules/ROOT/pages/platform/security/secure-connections.adoc

+. Create a VPC endpoint
+. Accept endpoint connection requests and enable private DNS in the cloud provider's console
+. Disable public traffic (optional). 
+If you disable public traffic it is highly recommended to link:https://support.neo4j.com/s/article/13174783967507-How-To-Test-Connectivity-Through-The-Private-Endpoint[Test Connectivity Through The Private Endpoint]


There should not be a link to a Support article. If the information there is needed, better to lift it from there and put it here somewhere.

AlexicaWright · 2024-11-22T13:00:40Z

modules/ROOT/pages/platform/security/secure-connections.adoc

@@ -65,7 +93,7 @@ Aura VPCs can't initiate connections back to your VPCs.
 ==== Browser and Bloom access over private endpoints

 To connect to your instance via Browser or Bloom, you must use a dedicated VPN.
-This is because when you disable public access to your instance, this applies to all connections, including those from your computer when using Browser or Bloom.
+This is because when you xref:[disable public access] to your instance, this applies to all connections, including those from your computer when using Browser or Bloom.


Yes, why not? I think it would be helpful.

fiquick · 2024-12-17T11:01:10Z

Hi Jessica, what do you reckon, do you think this in a fit state to merge?

AlexicaWright

A few suggestions.

modules/ROOT/pages/platform/security/secure-connections.adoc

AlexicaWright · 2024-12-18T12:27:53Z

modules/ROOT/pages/platform/security/secure-connections.adoc

@@ -65,7 +93,7 @@ Aura VPCs can't initiate connections back to your VPCs.
 ==== Browser and Bloom access over private endpoints

 To connect to your instance via Browser or Bloom, you must use a dedicated VPN.
-This is because when you disable public access to your instance, this applies to all connections, including those from your computer when using Browser or Bloom.
+This is because when you xref:[disable public access] to your instance, this applies to all connections, including those from your computer when using Browser or Bloom.


You'll need to insert the xref here.

modules/ROOT/pages/platform/security/secure-connections.adoc

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

neo-technology-commit-status-publisher · 2024-12-18T13:19:19Z

Thanks for the documentation updates.

The preview documentation has now been torn down - reopening this PR will republish it.

neo-technology-commit-status-publisher · 2024-12-18T13:20:18Z

This PR includes documentation updates
View the updated docs at https://neo4j-docs-aura-536.surge.sh

Updated pages:

Secure connections

network access

33bd8f4

fiquick added the WIP label Nov 19, 2024

fiquick changed the title ~~network access~~ Disabling network access Nov 19, 2024

fiquick added 3 commits November 20, 2024 13:43

network access

4584a93

coming along nicely

f68760c

more ideas and image

8e03d20

fiquick added 2 commits November 20, 2024 16:08

edit

b07ebcb

edits

be12ad8

fiquick commented Nov 22, 2024

View reviewed changes

Update secure-connections.adoc

e9d9d6f

fiquick commented Nov 22, 2024

View reviewed changes

fiquick added 3 commits November 22, 2024 11:46

edit

2988310

spacing

c611c4c

edit

f90c539

AlexicaWright reviewed Nov 22, 2024

View reviewed changes

fiquick added 4 commits November 25, 2024 11:02

save

1f2043e

edit

ce05313

update for good flow

837622f

add bold

3420b9a

fiquick requested a review from AlexicaWright December 17, 2024 11:01

Update secure-connections.adoc

943db9d

AlexicaWright reviewed Dec 18, 2024

View reviewed changes

fiquick and others added 5 commits December 18, 2024 14:37

Update modules/ROOT/pages/platform/security/secure-connections.adoc

d21e5e5

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

Update modules/ROOT/pages/platform/security/secure-connections.adoc

6eae78f

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

Update modules/ROOT/pages/platform/security/secure-connections.adoc

1d19845

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

Update modules/ROOT/pages/platform/security/secure-connections.adoc

5b8ed5e

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

Update modules/ROOT/pages/platform/security/secure-connections.adoc

90f31da

Co-authored-by: Jessica Wright <49636617+AlexicaWright@users.noreply.github.com>

AlexicaWright approved these changes Dec 18, 2024

View reviewed changes

fiquick added 3 commits December 18, 2024 15:16

Update secure-connections.adoc

049a547

Update secure-connections.adoc

ddcafd0

Update secure-connections.adoc

3a2dbc4

fiquick merged commit 2beed90 into main Dec 18, 2024
4 checks passed

fiquick deleted the networkaccesswizard branch December 18, 2024 13:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Disabling network access #536

Disabling network access #536

fiquick commented Nov 19, 2024

fiquick commented Nov 20, 2024

fiquick Nov 22, 2024

AlexicaWright Nov 22, 2024

fiquick Nov 22, 2024

AlexicaWright Nov 22, 2024

fiquick Nov 22, 2024

fiquick Nov 22, 2024 •

edited

Loading

AlexicaWright Nov 22, 2024

AlexicaWright Dec 18, 2024

AlexicaWright left a comment

AlexicaWright Nov 22, 2024

AlexicaWright Nov 22, 2024

AlexicaWright Nov 22, 2024

fiquick commented Dec 17, 2024

AlexicaWright left a comment

AlexicaWright Dec 18, 2024

neo-technology-commit-status-publisher commented Dec 18, 2024 •

edited

Loading

neo-technology-commit-status-publisher commented Dec 18, 2024

Disabling network access #536

Disabling network access #536

Conversation

fiquick commented Nov 19, 2024

fiquick commented Nov 20, 2024

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

fiquick Nov 22, 2024 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

AlexicaWright left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

fiquick commented Dec 17, 2024

AlexicaWright left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

neo-technology-commit-status-publisher commented Dec 18, 2024 • edited Loading

neo-technology-commit-status-publisher commented Dec 18, 2024

fiquick Nov 22, 2024 •

edited

Loading

neo-technology-commit-status-publisher commented Dec 18, 2024 •

edited

Loading